Connect your AI agent to your traffic

Devices & fleet — list, inspect, rename, transfer and unpair devices; flip capture on and off; test PAC connectivity; resume held breakpoints and resend requests. Destructive writes require confirm.

Device observability — the one-query capture-health read (engine, CA trust, decrypt reasons), the filterable per-device telemetry stream, and the opt-in TTL-expiring verbose audit tier.

Customer screen share — request a consent-prompted live view of a device, end it from either side, and list, replay or delete the saved recordings.

Captured traffic — search, filter, tag and inspect full request/response pairs, summarize a device's traffic profile, export HAR, and delete or wipe (confirm-gated, irreversible).

Scripting engine — sandboxed JavaScript that rewrites or synthesizes matching traffic inline, at global, service, user and device tiers, with a no-write dry run. Writes are admin-only: this is arbitrary-code power.

Block rules & breakpoints — auto-block or mock requests by method and host/path wildcard, and set the patterns that pause matching exchanges for inspection. Writes alter live traffic, so they require confirm.

Capture switches — inspect-all-requests, decrypt-all-hosts MITM mode, and the paused-domains list, each a read/write pair.

Settings — the effective global and per-device settings documents, connection type at global, user and device tiers, and the iOS Live Activity pill text.

Environment variables — read, set, delete and bulk-import the global and per-device variable bags scripts and rules interpolate.

Egress control — the upstream proxy pool (credentials redacted), per-device external-proxy routing, live egress-IP status, TTL'd manual overrides and the fail posture.

Remote browsers — open pages, evaluate scripts, screenshot and snapshot a connected Chrome, behind a per-device opt-in. Raw Chrome DevTools Protocol passthrough is admin-only.

Browser profiles — CRUD over custom Chromium-family launch profiles authored in the dashboard and synced to the bmc CLI.

CDP daemon — start, stop and provision named browser-capture devices on a remote bmc machine, read daemon status and logs, and hot-update the daemon without losing capture.

Android farm — provision phones as child devices, list the fleet, screenshot, dump UI hierarchy, and read capture status, automations, recordings, schedules and daemon logs.

Farm phone driving — tap, swipe, type, press buttons, launch and terminate apps, screenshot, record and read crash logs on real farm phones; app install/uninstall is admin-only.

Farm actions — find-and-tap by content, change settings and Wi-Fi, manage app lifecycle, grant permissions, pull files, and run, replay or schedule recorded automations (confirm-gated).

Farm raw power — shell, adb, arbitrary input, proxy and airplane toggles, reboot and file push. Admin-only, confirm-gated, and excluded from the free-text assistant entirely.

iOS farm — the iPhone analog: provision, list, screenshot, dump UI, drive taps and input, manage apps and orientation, onboard the on-device control runner, and start a live mirror.

Live mirror & control locks — start a low-latency phone mirror with touch input over a single-use scoped relay token, tune the transport, manage automation variables, and acquire or release exclusive device control.

Farm phone health & recovery — the per-phone status/why/fix model, plus the software-first repair ladder: retry, tunnel restart, remote reboot, per-port USB power-cycle and the composed fleet heal.

Farm daemon & components — live daemon status, restart and self-update, tunnel reaping, and the per-component install/update/onboard lifecycle across one phone or the whole fleet.

Workspaces & tabs — shared workspaces with retention policy, plus the tab model: create, rename, filter and select exactly what the dashboard shows.

Snapshots — create, list and download point-in-time captures of a workspace's traffic.

Service groups & tags — group hosts into named services with linked agents, manage device membership, and the tag vocabulary entries are labeled with.

To-dos — the owner-scoped shared task board: list, create, update, complete and delete, live on every surface.

Notifications — the in-app notification center: read and archive, per-type channel preferences with mute windows, and self-notify.

Device push — list APNs tokens, send notifications (including actionable Accept/Reject prompts), and read back the device's answer.

Advisor Center & issue reports — browse enriched findings with evidence and deep links, turn one into a GitHub issue or a to-do, and file or list one-tap issue reports.

Telegram linking — link up to five accounts to the Telegram bot, switch the active one, and unlink (admin variant included).

Assistant sessions — the AI assistant's multi-session chat threads, uploaded attachments (short-lived signed URLs), and shared-conversation links.

Assistant memory — personal long-term memory plus the governed team store: propose, approve, reject and edit shared facts, attribution, and the per-user GDPR erasure path.

Assistant skills — the loadable instruction-and-tool bundles the assistant activates mid-chat, with per-skill files and an AI-drafted starting point. Writes are admin-only.

Repo skills — the git-committed SKILL.md corpus: read it, and edit, toggle or remove entries as reviewed commits. Writes are admin-only git write-back.

Assistant agents — the specialist-agent registry task delegation and service groups reference. Writes are admin-only.

Knowledge imports — queue a repo or uploaded file into the team knowledge store; the worker fetches, audits, embeds and de-duplicates, with live progress and bulk undo.

Assistant configuration — token and cost analytics, the global on/off switch, and the brain's model and behavior knobs (admin-only to write).

Plugins — browse, install and uninstall packaged extensions; publishing and removal are admin-only.

Directory & installs — the published catalogue of skills and plugins, operator-curated listings, per-user skill installs, and the install defaults new users receive.

Downstream MCP servers — register, enable and inspect the external MCP servers the assistant can call through.

Personal connectors — your own outbound MCP connectors with a full OAuth 2.1 client leg (discovery, DCR, PKCE); tokens land write-only in the vault, never readable back.

My account — your profile, devices, subscription and endpoints in one self-scoped read, display and preferred names, per-user assistant settings, and self-service account deletion (confirm-gated).

Roles & users — RBAC roles and capabilities, per-user role assignment, the configurable default signup role, and the admin user roster with exact-email lookup.

Access grants & impersonation — time-boxed capability grants, effective-permission preview, and audited support impersonation with an explicit end.

Audit trail — the filterable, paginated who-did-what-when ledger of every action on every surface, agents included, with full per-event detail.

Live stats & status — platform-wide capture statistics and infrastructure health at a glance.

Billing — your subscription, invoices and metered usage, checkout and customer-portal sessions, and the value-blind Stripe admin reads and non-secret config writes (cancel is confirm-gated).

TestFlight beta admin — groups, testers, invitations and App Store review status, with invite, remove and group-membership writes (confirm-gated).

Localization — locales, namespaces, keys and messages, coverage stats and the missing-translation report, machine translation, bulk import and catalog publishing.

Observed API — turn captured traffic into an evidence-backed API model: projects, immutable revisions, reviewable path candidates, drift detection and deterministic OpenAPI 3.1 export.

Federated SSO — the closed, admin-onboarded partner-client registry; secrets are vault names only, never values.

App secrets — the vault-backed secret store: names and metadata are listable, values are write-only and never read back on any surface. Mutations are admin-only.

Demo accounts — provision, reset and regenerate the guided demo users and their sample content.

Quality — run, re-run and cancel test suites, and read live results, history and the feature-to-test coverage maps.

Work-in-progress board — the live projection of open work: list, update, history and clear-done.

Raw database & realtime — direct table CRUD, RPC and broadcast. The escape hatch: admin-only and excluded from the free-text assistant entirely.